CVE/vulnerability

CISA Adds Actively Exploited VMware ESXi Logging Flaw to KEV Catalog

The Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2026-41709, a vulnerability related to insufficient logging affecting Broadcom VMware ESX, to…

1 week ago

Cisco Patches Actively Exploited SSL VPN Vulnerability Affecting ASA and FTD Firewalls

Cisco has released security updates that address a critical vulnerability in the Remote Access SSL VPN service on its Secure…

1 week ago

CISA Warns of Active Attacks Exploiting Critical Node2Shell RCE Vulnerability in Node.js

CISA has added CVE-2026-111497, a critical vulnerability in Google Brotli that affects Node.js, to its Known Exploited Vulnerabilities catalog following…

1 week ago

Cloudflare Image Transformation Flaw Allows Hackers to Bypass CSP and Execute Malicious JavaScript

Security researchers have demonstrated an attack chain against Cloudflare’s Image Transformations service that bypasses SVG sanitization and Content Security Policy…

1 week ago

Critical Veeam Backup & Replication Flaw Allows Unauthenticated Attackers to Bypass Authorization

Veeam has released security updates to address a critical authorization bypass vulnerability in Backup & Replication. This flaw, tracked as…

1 week ago

Critical UEFI Firmware Flaw Allows Attackers to Execute Malicious Code Before OS Boots

A critical vulnerability in EDK II's PXE network boot driver could allow unauthenticated attackers to execute malicious code before the…

1 week ago

Critical GoAhead Web Server Flaw Allows Attackers to Bypass Client Certificate Authentication

A critical flaw in the GoAhead embedded web server lets revoked client certificates pass authentication checks, potentially restoring access to…

1 week ago

HashiCorp Consul Vulnerability Allows Attackers to Bypass Authorization and Gain Elevated Privileges

HashiCorp disclosed a vulnerability in consul-k8s, a cross-namespace authorization bypass that could let attackers with limited Kubernetes permissions gain elevated…

1 week ago

Apple Fixes Actively Exploited iOS Zero-Day Vulnerability in CoreGraphics

Apple has released updates for iOS 18.7.11 and iPadOS 18.7.11 to address three security vulnerabilities, including a CoreGraphics flaw connected…

1 week ago

KeePassXC 2.8.0 Released to Fix Multiple Security Vulnerabilities Affecting Password Manager

KeePassXC has released version 2.8.0 to address multiple security vulnerabilities related to database imports, browser integration, SSH key handling, and…

2 weeks ago